Re: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-07-11 Thread Jeff Trawick
On Sat, Jul 11, 2015 at 2:55 PM, William A Rowe Jr wrote: > We can have a dialog about the best behavior of our default config. > However... > > On Sat, Jul 11, 2015 at 9:56 AM, Kaspar Brand > wrote: > >> On 01.07.2015 14:27, Ben Laurie wrote: >> > On 1 November 2014 at 09:05, Kaspar Brand >> w

Re: [VOTE] Release 2.2.30 as GA?

2015-07-11 Thread Eric Covener
On Sat, Jul 11, 2015 at 10:29 AM, William A Rowe Jr wrote: > The pre-release candidate tarballs of Apache httpd 2.2.30, can be found in; > > http://httpd.apache.org/dev/dist/ > > +/-1 > [ ] Release 2.2.30 GA (apr 1.5.2, apr-util 1.5.4) Thanks for RM'ing +1, AIX/xlc/ppc64 Only fail

Re: [VOTE] Release Apache httpd 2.4.16 as GA

2015-07-11 Thread Eric Covener
On Sat, Jul 11, 2015 at 3:43 PM, Eric Covener wrote: > On Fri, Jul 10, 2015 at 4:33 PM, Jim Jagielski wrote: >> [ ] +1: Good to go > > > +1, 100% pass on AIX/xlc/ppc64. (and thanks for RM'ing!)

Re: [VOTE] Release Apache httpd 2.4.16 as GA

2015-07-11 Thread Eric Covener
On Fri, Jul 10, 2015 at 4:33 PM, Jim Jagielski wrote: > [ ] +1: Good to go +1, 100% pass on AIX/xlc/ppc64.

Re: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-07-11 Thread William A Rowe Jr
We can have a dialog about the best behavior of our default config. However... On Sat, Jul 11, 2015 at 9:56 AM, Kaspar Brand wrote: > On 01.07.2015 14:27, Ben Laurie wrote: > > On 1 November 2014 at 09:05, Kaspar Brand > wrote: > >> The fundamental objection I have to enabling stapling by defau

Re: [RFC] Enable OCSP Stapling by default in httpd trunk

2015-07-11 Thread Kaspar Brand
On 01.07.2015 14:27, Ben Laurie wrote: > On 1 November 2014 at 09:05, Kaspar Brand wrote: >> The fundamental objection I have to enabling stapling by default in our >> GA releases is that it would enable a "phoning home" feature (to the >> CA's OCSP responders) as a side effect of configuring a ce

Re: Using UPN from subjectAltName with SSLUserName

2015-07-11 Thread Kaspar Brand
On 29.06.2015 15:14, Jan Pazdziora wrote: > How about just passing char * and doing all the mapping logic > including possible OBJ_create in parse_otherName_value? My goal here > is to have all the "hard" work of determining the semantics isolated > in one place. > > Please see patch attached. Yo

[VOTE] Release 2.2.30 as GA?

2015-07-11 Thread William A Rowe Jr
The pre-release candidate tarballs of Apache httpd 2.2.30, can be found in; http://httpd.apache.org/dev/dist/ +/-1 [ ] Release 2.2.30 GA (apr 1.5.2, apr-util 1.5.4) Win32 src to follow shortly, vote to run through 14:30 GMT Tuesday.

Re: test base line

2015-07-11 Thread Rainer Jung
Hi Stefan, Am 09.07.2015 um 13:46 schrieb Stefan Eissing: I need some help with establishing a test baseline. I checked out the test framework from https://svn.apache.org/repos/asf/httpd/test/framework/trunk, followed the README and ran the tests against a freshly installed 2.4.x in /opt/htt